That would be similar to the process used by sellers who take cards payment and their PSPs (payment service providers). Basically, the seller never stores (and

That would be similar to the process used by sellers who take cards payment and their PSPs (payment service providers). Basically, the seller never stores (and ideally never even sees) the buyers' card numbers. Instead, the card numbers are stored by the PSP, which then issues seller-specific tokens associated to each card. The seller can then store the tokens, and use them to process any payments to their verified accounts. If the tokens are ever leaked or stolen they are useless to an attacker, as these tokens can only be used with that specific PSP to perform payments in favour of the seller for whom they were issued in the first place.